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dn: cn=managerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsSimpleRole 
objectclass: nsManagedRole 
cn: managgerrole 

description: IVIanager Role within the Company 



# # 

dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 
objectclass: person 
objectclass: inetorgperson 
uid: pointyhair 
gn: pointy 
m sn: hair 

1^ nsRoleDN: cn=managerrole, dc=dom, dc=ain 

i description: Pointy Haired Manager 
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dn: cn= building12people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: building12people 

nsRoleFilter: building=12 

description: People who work in building 12 



dn: cn=megamanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
I cn: megamanaggerrole 
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S nsRoleDN: cn=managerrole, dc=dom, dc=ain 

S nsRoleDN: cn=networkmanager, dc=dom, dc=ain 

is 

J description: Super Manager Role within the 

Company 



dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsEnumeratedRole 
objectclass: groupofuniquenames 
on: peonrole 

groupmember: uid=dboreham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 
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For each entry within scope, the 
computed attribute nsRole is calculated 



The computed attribute nsRole is 
examined to see if the role is present. 
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This results in a list of entries that 
possess the role. 



The list is thereafter returned to a 
client. 
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Dn:cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosCiassicDefinition 
cosTemplate 

Dn: cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceClass 
cosAttribute: mailboxquota 
cosAttribute: maysendextemalmail 
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dn: cn=user. cn=MailSen,erCOS, cn=LocalConfig, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 10000000 

maysendexternalmail: TRUE 

dn: cn=guest, cn=MallServerCOS. cn=LocalConfig, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 
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dn: cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosPointerDefinition 
cosTemplateDn: ou=people, o=acme 
cosAttribute: facsimilieTelephoneNumber default 



dn: cn=messaging_server_cos, ou=people, 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: coslndirectDefinition 
coslndirectSpecifier: manager 
cosAttribute: accountingCode 



